Lobo_Corp/ToBePlayed-Auth
Public Access
3
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
51 Commits 1 Branch 0 Tags
600b0b143ff1626785b3ba39976c42f02aa6b240
Commit Graph
10 Commits
Author SHA1 Message Date
lobo 600b0b143f feat(login): publish verify key as JWKS
Build, Test & Push Auth Service / docker (push) Successful in 1m21s
Details
Build, Test & Push Auth Service / quality-check (push) Successful in 26s
Details 
Auth serves its Ed25519 public key at GET /.well-known/jwks.json, so
Core can find the key by the token kid. Startup fails on a blank
JWT_KID, because compose turns an unset value into "" and Core finds
keys only by kid.
 2026-09-25 11:01:28 +02:00
lobo 3a48ce0ff1 feat(auth): rate limit registration, atomic login limit 
10 failed registrations per IP block it for 15 minutes (429 TOO_MANY_ATTEMPTS with Retry-After). Login and registration now take an attempt before the check, so a burst of parallel requests cannot pass the limit.
 2026-09-25 09:06:30 +02:00
lobo 9df7389fab docs: rewrite the readme for the public showcase 
Also ignore local secrets and stop tracking the generated effective-pom.
 2026-09-25 08:22:56 +02:00
lobo 973b980e05 feat(profile): opt-in public profile with a ticket for Core 
user_settings.public_profile (off by default, needs a display name).
GET /api/public/profiles/{displayName} answers only for enabled users with a
public profile and returns a 10-minute EdDSA ticket for Core. A token with a
typ claim is no login, so the ticket cannot be used as one.
 2026-09-24 14:18:32 +02:00
Andreas Dahm 9114eb096b Changed from JWT token to public/privat key 2026-05-12 08:56:51 +02:00
Andreas DahmandClaude Opus 4.7 4859e74d45 Add Auth-owned product roadmap to README 
Captures the Auth slices of the cross-service product roadmap:
username + public-profile opt-in, friends graph, email/notification
preferences, invitation system enhancements, and GDPR delete/export.
Cross-links to the umbrella roadmap in ToBePlayed-Deployment.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-11 14:51:24 +02:00
Andreas Dahm 34fa22c2b9 Changed readme.md 2026-05-11 14:40:54 +02:00
lobo 2a5839b736 Refactor package structure: domain -> modules 
Move domain packages into a new modules.* hierarchy and rename controller packages to api.* across login, registration, and user modules. Update package declarations and imports (including shared.api DTOs and JwtService -> modules login TokenGenerator), adjust tests and persistence/mapper paths accordingly, and apply minor formatting fixes (missing EOF newlines). This reorganizes the project to better separate API surface and module boundaries.
 2026-04-19 12:50:01 +02:00
lobo 161381ebe5 Cleaned up the architecture 2026-04-03 11:35:53 +02:00
lobo a7c9364c7a First commit 2026-03-31 18:20:40 +02:00